Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/70b16285-4233-386f-9fac-8c8c4033b061.roa
File:                     70b16285-4233-386f-9fac-8c8c4033b061.roa (raw, json)
Hash identifier:          9XG1styHfpAv2hvjhCo2z8F+qVkTdWcunTNdbRClues=
Subject key identifier:   75:16:F1:BE:86:F0:E2:0E:D8:7C:52:AC:55:1F:B3:64:B9:A0:EE:8E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B64CE4412186D52224029A700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/70b16285-4233-386f-9fac-8c8c4033b061.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     16625
IP address blocks:        23.50.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:44:12:18:6d:52:22:40:29:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=f4d38044-d3cc-43c9-bac4-6d6a1fbd0f4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e1:93:b1:87:96:29:85:c1:5a:6e:6d:fa:ee:
                    41:a0:22:ab:d0:25:88:c6:ba:8f:60:87:d4:7e:73:
                    4d:97:a7:ff:6d:41:30:85:db:02:61:d2:80:b0:05:
                    73:ec:9c:12:a7:56:47:2c:53:81:2b:8a:72:3e:c8:
                    4c:e6:e8:72:23:58:ac:67:9f:19:c0:cc:10:04:4e:
                    fa:31:d0:23:d5:b3:2b:72:98:3a:6b:3a:8e:ba:d9:
                    25:cb:25:45:c8:d2:68:c0:26:72:84:85:a2:77:b8:
                    dc:3c:ca:8e:3e:93:0d:98:4d:ac:8c:fb:ab:4a:92:
                    bd:bc:ab:cf:77:d8:ad:22:56:27:de:ee:ec:72:6a:
                    c0:f9:b7:b8:60:ec:64:2f:23:4a:3e:fd:c1:b7:b7:
                    0c:8a:14:71:89:0c:90:4c:d7:c6:bd:b8:a7:d6:8c:
                    4e:5d:dd:82:e0:f9:49:ad:29:1c:97:1f:97:6b:f3:
                    ca:58:ce:94:26:8c:e2:d4:47:e2:9e:82:f9:2e:10:
                    11:9d:8a:4b:30:ff:d1:07:77:a7:5a:11:5e:22:aa:
                    28:88:01:8b:51:35:c3:a7:2c:12:21:2b:13:03:16:
                    e4:f2:9d:83:94:be:33:d9:66:26:23:75:82:23:ae:
                    9b:94:5c:d3:ec:ab:fa:42:a8:4d:05:ea:05:fc:da:
                    a3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:16:F1:BE:86:F0:E2:0E:D8:7C:52:AC:55:1F:B3:64:B9:A0:EE:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/70b16285-4233-386f-9fac-8c8c4033b061.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.50.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:f1:66:a2:39:84:89:61:f1:db:a7:a1:9f:ad:d6:6f:ba:e3:
         04:5c:f5:55:8e:d2:47:2d:ba:e7:18:16:65:b2:f9:f8:03:62:
         6a:ba:42:8e:3f:32:24:35:76:16:f1:70:4b:e3:b8:7f:41:08:
         a9:34:a0:ac:06:da:ab:91:17:fe:ea:1e:72:da:b3:ab:f1:0f:
         b6:22:2a:49:c6:d7:c5:f4:7c:5e:51:3c:f8:0f:9c:de:45:72:
         1a:5d:84:bf:8f:f6:ab:17:43:83:6e:83:5c:fa:d7:d7:5e:cc:
         8b:54:b9:9b:1c:61:b2:1c:bc:f4:8e:78:7b:c5:6e:c5:fd:0c:
         81:12:d3:d5:e8:7c:93:f3:69:a3:61:12:1b:cf:b2:a0:07:03:
         16:6c:ea:95:c6:90:65:a7:a1:bb:b3:3f:21:f7:48:a1:d8:2f:
         0c:b3:9d:5a:93:f6:89:00:03:9c:82:b5:cc:90:9b:ef:28:fa:
         22:21:cd:1a:1f:e4:4e:27:6c:09:73:4b:c3:8e:46:f4:f0:7a:
         c1:7d:9c:60:77:3f:2f:bf:50:ab:11:08:ef:89:e2:3e:e4:a4:
         fb:d9:76:4c:05:ab:f9:dd:02:92:70:9b:73:cb:48:f4:7b:d8:
         f8:9e:41:5c:25:03:b7:c9:89:95:4a:d5:4a:4f:e3:8b:4b:62:
         cf:65:67:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:21:12 2025 by rpki-client